Bitwarden actually. I was really split on this but ultimately I trust Bitwarden, the company, to run a secure server than myself.

Who has time to track CVE's and react to them in a timely manner? I don't. If something happened, I probably don't have the infrastructure or know-how to even realize I had been breached.